Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call

Information disclosure may occur while decoding the RTP packet with invalid header extension from network

Use of Uninitialized Variable in HLOS

Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions

Memory corruption while performing encryption and decryption commands

memory corruption while loading a PIL authenticated VM, when authenticated VM image is loaded without maintaining cache coherency

Memory corruption when passing parameters to the Trusted Virtual Machine during the handshake

Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer

Memory corruption while processing input message passed from FE driver

Memory corruption in display driver while detaching a device

Memory corruption while power-up or power-down sequence of the camera sensor

Memory corruption while configuring a Hypervisor based input virtual device

Transient DOS while parsing per STA profile in ML IE

Transient DOS may occur while parsing SSID in action frames

Transient DOS may occur while parsing EHT operation IE or EHT capability IE

Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session

Transient DOS may occur while processing the country IE

Cryptographic issues while generating an asymmetric key pair for RKP use cases